Rogeeandrogee
fb83285617
* HH-445: deploy production observability and runbooks * fix(ops): share production database DSN * fix(HH-445): enforce database TLS gate * fix(HH-445): preserve production serve command * fix(prod): require external database dependencies * fix(prod): unify database host rejection gates * test(prod): enforce exact database TLS runbook contract --------- Co-authored-by: Rogee <rogee@ipao.vip>
42 lines
955 B
Plaintext
42 lines
955 B
Plaintext
# Production Docker Compose log collector. Docker's non-blocking Fluentd driver
|
|
# sends every service with a gochat.<container> tag to this forward input.
|
|
<source>
|
|
@type forward
|
|
bind 0.0.0.0
|
|
port 24224
|
|
</source>
|
|
|
|
<filter gochat.**>
|
|
@type record_transformer
|
|
<record>
|
|
service ${tag_parts[1]}
|
|
environment production
|
|
</record>
|
|
</filter>
|
|
|
|
# Local, disk-buffered JSON is the reliable baseline and remains searchable
|
|
# without an external logging vendor. Ship these files onward if required.
|
|
<match gochat.**>
|
|
@type file
|
|
path /fluentd/log/gochat
|
|
append true
|
|
compress gzip
|
|
<buffer time>
|
|
@type file
|
|
path /fluentd/buffer/gochat
|
|
timekey 60
|
|
timekey_wait 10s
|
|
timekey_use_utc true
|
|
flush_mode interval
|
|
flush_interval 5s
|
|
chunk_limit_size 16m
|
|
total_limit_size 8g
|
|
retry_type exponential_backoff
|
|
retry_forever true
|
|
overflow_action block
|
|
</buffer>
|
|
<format>
|
|
@type json
|
|
</format>
|
|
</match>
|